Privacy notice
16 September 2026
This notice has not yet been reviewed by a solicitor. We have written it as accurately and plainly as we can from how the product actually works, but nothing on this page is a guarantee that we comply with data protection law.
Who we are
Dimitrios Athinaios, trading as NewLeaf operates NewLeaf and is the controller of your personal data under UK GDPR. Postal address: 26 Redan Place, London W2 4SA. Contact for anything in this notice, including a data protection request: dath.analyst@gmail.com.
What we hold
- Account and profile. Your email and name from sign-in, and your onboarding answers: course/degree, graduation stage, right-to-work status and whether you need sponsorship, target sectors and availability. We never infer your nationality, immigration status or a visa decision from this, and we never ask you to upload a visa document.
- Your master CV. The CV and optional cover letter you upload, and the structured facts, dates, links and never-claim rules you confirm from them.
- Your evidence bank. Individual achievement bullets you have accepted into your bank, and which angle and application each one has been reused for, so documents stay truthful and we do not repeat the same evidence badly.
- Job descriptions and generated documents. Job descriptions you paste, the targeting notes we build from them, and every version of the CV, cover letter, answer and hiring-team message we generate.
- Your tracker. Every application, its status history, your notes, confirmed dates, and any feedback you send us about a generated document. A feedback note can propose a correction to your master CV, but nothing changes until you confirm it yourself.
- Emails you forward. The full text of an email you choose to forward to your private NewLeaf inbox address, so we can classify it and add it to your tracker. We keep the full text for 30 days; after that we keep only the category and the short quote already shown in your tracker (see "How long we keep it").
- Payment records. Order and pass records from Stripe: amount, dates and status. We never see or store your card number — Stripe holds that directly.
- Technical and security records. Redacted logs described under "Model processing" below — never your CV, letter, email or prompt text.
Why we hold it, and our legal basis
We hold your data for the reasons below, each under a specific UK GDPR legal basis:
| Purpose | Legal basis |
|---|---|
| Running the core service: building your documents, running your tracker, and taking payment for a pass | Contract — necessary to provide the service you asked for (Article 6(1)(b)) |
| The weekly step email | Consent, opt-in only — toggle any time in Settings (Article 6(1)(a)) |
| "About your applications" email (deadline, next-action and forwarded-email reminders) | Consent, opt-in only — toggle any time in Settings (Article 6(1)(a)) |
| The pass-expiry courtesy email, shortly before your access runs out | Contract — transactional, tied to the purchase itself, no separate toggle |
| Security, fraud and abuse prevention: rate limits, admin audit trail, redacted error monitoring | Legitimate interests — keeping the service safe and working for every user; we hold only redacted counts and metadata for this, never your content (Article 6(1)(f)) |
| Responding to an access, export, correction or deletion request | Legal obligation and contract, as applicable |
We do not send marketing email of any kind, and we never sell or share your data for advertising.
Model processing
To read your CV, analyse job descriptions and tailor your CV, we send that text to Google's Gemini API. To write cover letters and screening answers, and to classify forwarded emails and give advice, we send the relevant text to Anthropic's Claude API. We use each provider's paid API terms, under which neither is permitted to use the prompts we send or the output it returns to train its models. We log which purpose a call was for, the model, token counts and its cost — never the prompt or the output text. Triage scores, eligibility checks and page-fill checks are calculated by our own code, not by the model, and you always see them before you decide anything (see "Automated decisions" below).
Who else processes it
We use the following processors to run NewLeaf. None of them is permitted to use your data for their own purposes.
| Who | What for | Where, and transfer safeguard |
|---|---|---|
| Supabase | Database, authentication and file storage | Ireland (EU; Supabase region eu-west-1) — the region of the live production project |
| Vercel | Hosting the application and its scheduled jobs | UK (London; Vercel region lhr1) |
| Reading your CV and job descriptions and tailoring your CV (Gemini API) | United States — standard contractual clauses; to be confirmed against the signed terms before public release | |
| Anthropic | Writing your cover letters and answers, and classifying your emails (Claude) | United States — standard contractual clauses; to be confirmed against the signed agreement before public release |
| Stripe | Taking payment for your pass | UK/EU and United States — Stripe's standard contractual clauses; to be confirmed before public release |
| Postmark | Receiving the emails you forward to your private inbox address | United States — standard contractual clauses; to be confirmed before public release |
| Resend | Sending you reminder and account emails | United States — standard contractual clauses; to be confirmed before public release |
| Sentry | Error monitoring on redacted technical data only — never your document or email content | United States — standard contractual clauses; to be confirmed before public release |
How long we keep it
- Your master CV, confirmed documents and tracker: until you delete your account.
- A failed or still-pending upload: 24 hours.
- The extracted text of a successfully parsed upload: 7 days. We keep the original file itself until you delete your account.
- The inputs and checkpoints of a generation in progress: 7 days after it finishes.
- The full text of an email you forward to us: 30 days, then we delete the text and keep only the category and the short quote already shown in your tracker.
- A data export you downloaded: 24 hours, then we delete the file.
- An interview-prep handoff preview: 24 hours after it expires (10 minutes after you create it).
- Rate-limit records used to stop abuse: a few hours, on their own short timer.
- Redacted usage logs (token counts and cost, never text): 90 days, then only anonymous daily totals.
- A record that you asked to delete your account: 30 days after the request — kept only so that if we ever restore a backup, it does not accidentally bring your account back (see "Deleting your account" below).
Your rights
You can ask us for access to your data, a full export, a correction, or to object to a particular use, by emailing dath.analyst@gmail.com. Export and deletion are also self-service from Settings.
Exporting your data. Settings can build a complete download of everything this notice describes: your masters, documents, tracker, evidence bank, job descriptions, prep packs and payment records. The download link lasts 15 minutes and the file itself is deleted 24 hours after it is built.
Deleting your account. From Settings you can ask us to delete your account. Access is disabled immediately, and deletion normally completes within 24 hours: your masters, documents, tracker, evidence, mailbox connection and every file you uploaded are permanently removed. Two narrow exceptions: Stripe, our payment processor, independently keeps its own transaction records for its own legal and accounting obligations — we delete our own record of you, including the link to your Stripe customer, but cannot delete Stripe's records; and a short internal record that you asked to be forgotten (an opaque ID and a date, nothing else) is kept for 30 days so a restored backup cannot accidentally bring a deleted account back to life, then it is deleted too.
If you are unhappy with how we have handled your data, you can complain to us first at the address above, or directly to the UK's regulator, the Information Commissioner's Office, at ico.org.uk.
Cookies
We use two cookies, both necessary for the product to work: one keeps you signed in, and one protects your account from cross-site request forgery. Neither carries an advertising or tracking identifier. We do not use any analytics, advertising or tracking cookie.
Automated decisions
We never make an automated decision about your job applications, and nothing is ever sent to an employer, recruiter or job board on your behalf, automatically or otherwise. Our triage score, eligibility checks and page-fill checks are shown to you so that you can decide what to do next; the product never acts on them by itself. You choose what to copy, download and submit, every time.
Age
NewLeaf is built for people applying for graduate jobs and is intended for use by people aged 18 or over. We do not knowingly collect information from anyone under 18; if you believe a child has given us information, contact us at the address above and we will delete it.
Changes to this notice
We will update the date at the top of this page whenever we change it. If a change is significant, we will also tell you by email or ask you to accept the new version before you continue, the same way we handle a change to the terms of service.